This is an automated email from the ASF dual-hosted git repository.

bteke pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop.git


The following commit(s) were added to refs/heads/trunk by this push:
     new d72cdf7205c9 YARN-11611. Remove json-io to 4.14.1 due to 
CVE-2023-34610 (#6257)
d72cdf7205c9 is described below

commit d72cdf7205c9e5310e832b2faa2e5b103f0804e0
Author: Benjamin Teke <brumi1...@users.noreply.github.com>
AuthorDate: Mon Nov 27 15:39:09 2023 +0100

    YARN-11611. Remove json-io to 4.14.1 due to CVE-2023-34610 (#6257)
    
    Co-authored-by: Benjamin Teke <bt...@cloudera.com>
---
 .../hadoop-yarn-server-applicationhistoryservice/pom.xml              | 4 ++++
 1 file changed, 4 insertions(+)

diff --git 
a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml
 
b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml
index b55dd30a1718..eb68251aa607 100644
--- 
a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml
+++ 
b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml
@@ -229,6 +229,10 @@
           <groupId>org.javassist</groupId>
           <artifactId>javassist</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>com.cedarsoftware</groupId>
+          <artifactId>java-util</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
   </dependencies>


---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org

Reply via email to